CHECKING  OUT  USED  GEAR:  Buying  used  IT  hardware  can  save  big  bucks. 
But  you’ll  need  to  be  careful  and  kick  the  tires  to  avoid  the  lemons,  page  28 
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News  Analysis 

A  Connecticut  college 
cites  price  and  support 
in  choosing  3Com  over 
Cisco  for  a  network 
upgrade.  PAGE12 

Open-source  routers 
are  winning  over  a 
few  early  corporate 
adopters  in  the 
nascent  market,  page  m 

the  GRILL:  Bruce  Bueno 
de  Mesquita  uses  his 
computer  model  to 
predict  the  outcome 
of  political  and  busi¬ 
ness  conflicts.  PAGE  16 


Opinions 

An  entire  industry 
bands  together  in  the 
name  of  IT  efficiency. 
PAGE  35 

Give  your  CEO  the 
hard  numbers  he 
wants  to  see  on  IT 
performance,  page  40 


Careers 

A  free  certification 
program  gives  mili¬ 
tary  veterans  a  leg  up 
on  IT  careers,  page  24 
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Mediterranean  Shipping  Company  has 
discovered  a  new  form  of  energy. 


Mediterranean  Shipping  Company  (MSC)  is  the  second-largest  container  ship  line 
in  the  world,  with  a  database  that  tracks  more  than  210  billion  transactions  a  year. 
The  company  recently  upgraded  its  database  to  Microsoft’ SQL  Server*  2008,S$ffc 
'Wily  to  handle  this  massive  load,  but  also  to  simplify  MSC's  database  administration 
and  help  ensure  high  availability.  Which  is  like  a  new  form  of  energy  for  MSC. 

See  the  whole  story  at  SQLServerEnergy.com 

SQL  Server  2008 


■  FEATURES 

18  Corporate  IT  Done  ‘Lite’ 

Instead  of  using  costly  software  from  big-name  vendors, 
some  IT  shops  are  trying  cheap,  lightweight  Web  2.0  and 
open-source  tools  that  deliver  ROI  quickly. 


24  Enlisting 


In  IT 


Veterans  fight  the  unemploy¬ 
ment  odds  with  the  help  of 
free  certifications  through 
the  CompTIA  Educational 


28  Checking  Out  Used  Gear 

Used  IT  hardware  can  be  good  and  cheap  -  if  you’re 
careful.  Here's  how  to  avoid  the  lemons. 

32  Nonprofits  Share 
Tech  Expertise 

Nonprofits  in  the  NetHope  consortium  help  one  another  by 
sharing  their  IT  experiences  and  open-source  software. 


Converged  Solutions  from  Sorint  uses  a  flexible  IP  core  for  your  company's  voice  video  and  data 
cemr  i.n  cations.  :h  technology  'Me  V?oc-’e  fr.reg'at  on.  your  mobile  has  a<  tne  functions  of  your 
oe''  phor.e  So  ,oj  :-m'i  :our cs-  oosot  ~c  she.,:  ever.  s  you  fnd  yourself  m. 
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THE  WEEK  AHEAD 

TUESDAY:  Oracle  is  scheduled  to  release  its  fourth-quarter 
and  fiscal  year  2009  financial  results. 


THURSDAY:  The  Armed  Forces  Communications  and 
Electronics  Association  will  hold  a  cybersecurity  symposium 
for  federal  government  and  U.S.  military  officials  and  con- 


computer  equipment  for  its 
development  work.”  said 
Valerie  Lincy.  editor  of  iron 
Watch,  a  Web  site  published 
by  the  Wisconsin  Project  on 
Nuclear  Arms  Control. 


in't  speculate  as  ti 


Dsaid 


have  been  shipped  to  Iran. 

"AMD  has  never  autho¬ 
rized  any  sales  or  shipments 
of  AMD  products  to  Iran  or 
any  other  embargoed  coun¬ 
try.  either  directly  or  indi¬ 
rectly,”  the  company  said. 

Mehdi  Noorbaksh.  an 
associate  professor  of  in¬ 
ternational  affairs  at  the 
Harrisburg  University  of 
Science  and  Technology  in 
Pennsylvania,  said  that  Iran 

on  the  black  market. 

"That  market  provides 
Iran  with  what  the  authori¬ 
ties  need  for  these  projects,” 

High  technology  from 
be  widely' av; 


Iranian  High  Perfori 
Computing  Rescarel 
said  that  it  had  asset 
Linux-based  supercc 


Twitter  Links 
Iranians  to 
Outside  World 

During  the  period  of  unrest 
following  the  disputed  Ira¬ 
nian  presidential  election  of 
June  5.  the  Twitter  social 
network  became  something 
of  a  lifeline  for  the  people 
of  Iran. 

While  the  Iranian  govern¬ 
ment  blocked  various 
channels  of  corn¬ 


lines,  satellite 

links  and  even  ” 

text  messaging  ^  * 

tools  -  citizens  ( 
were  able  to  ted  the  rest  of 
the  world  about  the  situa¬ 
tion  there  in  140-character 
bursts,  at  least  through  late 
last  week. 

In  fact  Twitter  Inc.  ac¬ 
knowledged  that  the  U.S. 

State  Department  asked 
it  to  delay  scheduled  site 
maintenance  work  early  last 


In  a  blog  post,  Twitter  co¬ 
founder  Biz  Stone  noted  that 
while -the  State  Department 
does  not  have  access  to  our 
decision-making  process.” 
the  company  decided  to 
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Smarter  technology  for  a  Smarter  Planet: 

Can  the  boundaries  of  a 
business  be  defined  by  its 
people  instead  of  its  walls? 

Businesses  like  nice  solid  walls,  both  the  physical  and  the  fire  variety. 

But  on  a  smaller,  flatter,  smarter  planet,  we  increasingly  find  ourselves 
working  with  people  far  outside  those  walls:  partners,  suppliers, 
customers  and  rdmote  employees.  Instead  of  protecting,  those  nice 
solid  walls  stand  in  the  way  of  how  people  want  to  work. 

IBM  is  incorporating  new  tools  like  social  software,  wikis,  blogs  and 
presence  awareness  throughout  its  entire  collaboration  portfolio  to  help 
people  in  companies  reach  beyond  their  walls.  The  next  challenge  is  to 
give  people  the  tools  they  need  anytime  and  anywhere  they  need  them, 
not  when  their  tech  department  has  time  to  set  them  up. 

That’s  why  IBM  is  offering  a  new  way  of  accessing  its  collaboration  and 
social  networking  tools:  through  the  cloud.  To  the  individual,  cloud-based 
tools  like  LotusLive™  let  people  work  securely  with  whomever  they  want 
to,  regardless  of  what  side  of  the  firewall  they  find  themselves  on.  To  the 
organization,  these  collaboration  tools  enhance  the  productivity  of  its 
employees  without  the  cost  and  complexity  of  building  and  managing 
any  additional  infrastructure,  giving  them  a  seamless  extension  of  their 
capabilities.  And  it's  all  backed  by  the  legendary  security  that  companies 
expect  from  IBM.  So  organizations  don’t  have  to  tear  down  their  walls 
to  reach  beyond  them. 

A  smarter  business  needs  smarter  software,  systems  and  services. 

Let’s  build  a  smarter  planet,  ibm.com/collaborate 
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Heartland  Commended 
For  Breach  Response 


Heartland  Pay¬ 
ment  Systems  Inc. 
CEO  Robert  Carr 
is  getting  high 
marks  from  some  analysts 
for  his  response  so  far  to 
a  massive  data  breach  dis¬ 
covered  at  the  credit-  and 
debit-card  payment  proces¬ 
sor  early  this  year. 

The  breach  may  have 
been  the  largest  ever  in¬ 
volving  payment  card  data 
—  some  analysts  estimate 
that  data  from  more  than 
100  million  cards  may  have 
been  exposed  in  the  intru¬ 
sion.  which  Heartland  dis¬ 
closed  on  Ian.  20. 

Since  then.  Carr  has 
moved  to  accelerate  an  end- 
to-end  encryption  project 
for  protecting  card  data.  It 
is  now  slated  for  comple¬ 
tion  in  the  third  quarter. 

Princeton.  N.J.-based 
Heartland  is  also  push¬ 
ing  for  development  of  an 
industrywide  standard  for 
encrypting  data  while  it's 
being  transmitted  over  net¬ 
works.  and  it  has  co-founded 
the  Payments  Processing 
Information  Sharing  Coun¬ 


Heaitland  CEO  Robert  Carr 
accelerated  an  end-lo-end  en¬ 
cryption  project  after  learnint) 


cil.  through  which  payment 
processing  companies  can 

security  threats,  vulner¬ 
abilities  and  fraud. 

week.  Carr  said  he  has  also 
reached  out  to  customers, 
industry  groups,  security 
analysts  and  reporters  to 
discuss  the  company's  re¬ 
sponse  to  the  breach. 

Avivah  Litan.  an  analyst 
at  Gartner  Inc.,  said  Carr 
took  a  different  approach 


than  most  CEOs  have  taken 

thing  like  this  happens, 
the  CEOs  hide."  she  said. 
"Some  might  question  his 

tom  line  (is],  he  is  elevating 
the  debate  around  card 

companies  to  speak  about 
end-to-end  encryption." 

Tom  Wills,  an  analyst 
at  Javelin  Strategy  and 
Research,  said  Carr's  re¬ 
sponse  compares  favorably 
with  that  of  El  A1  Airlines 
after  a  series  of  plane  hi¬ 
jackings  in  the  1970s. 

curity  from  the  ground  up 
and  went  on  to  build  a  repu- 

this  day.  as  the  world’s  most 
secure  airline,"  Wills  wrote 
in  an  alert  this  month. 

Based  on  Carr's  moves  so 
far.  "it’s  clear  that  Heart¬ 
land  intends  to  take  the  El 
A1  route.”  Wills  added. 

Carr  said  the  breach 
fulfilled  one  of  his  worst 
fears  as  CEO  of  Heartland. 
"It  was  devastating."  he 
said.  "People  had  asked  me 
for  years  ’What  keeps  you 
awake  at  night?’  and  I  would 
keep  telling  them  it  was  the 
fear  of  a  data  breach." 


Short 

lakes 


CLOUD  COMPUTINO 

IBM  Unveils 
Corporate 
Cloud  Services 

IBM  last  week  rolled  out  a 
series  of  cloud  computing  of¬ 
ferings  designed  to  support 
specific  enterprise  IT  tasks. 

The  new  product  line,  dubbed 
IBM  Smart  Business,  focuses 
on  delivering  hosted  tools  and 
services  for  two  tasks:  virtual 
desktop  management,  and  ap- 

Ui 

ing,  according  to  IBM. 

Services  for  both  are  avail¬ 
able  via  IBM's  network  of  cloud 
computing  centers  around  the 
world  or  through  cloud  infra¬ 
structures  built  by  IBM  behind  a 
customer's  firewall. 

In  addition.  IBM  is  offering 
CioudBurst  appliances  that  are 
built  to  accommodate  develop¬ 
ment  and  testing  tasks. 

IBM's  goals  are  fairly  obvious, 
said  RedMonk  analyst  James 
Governor,  via  e-mail.  “As  far 
as  the  enterprise  is  concerned, 
cloud  [computing]  is  the  new 
VMware,  and  IBM  wants  a  fat 
slice  this  time,"  he  wrote. 

For  IT  managers,  a  cloud- 
based  application  development 
service  could  significantly  cut 
development  costs,  according 

to  Governor.  “Dedicated  test 
and  development  servers  are  a 
real  drain  on  enterprise  com¬ 
puting  resources,"  he  wrote. 

“IBM  is  telling  customers  it  can 
reduce  the  expense."  5 

Kristof  Kloeckner,  vice  presi-  E 

dent  of  strategy  and  technology  S 

in  IBM's  software  group,  said  £ 

that  the  dedicated  cloud  prod-  1 

ucts  could  be  extended  to  en-  5 

terprise  applications  if  demand  ; 

warrants  it. 

-  CHRIS  KANARACUS.  • 
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To  team  more  about  our  exciting  opportunities 
stop  by  the  Prudential  recruiting  booth  or  visit 

jobs.prudential.com 
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China  Licenses 
MIPS  Technology 

-China’s  Institute  of 
Computing  Technology  (ICT) 
has  licensed  the  MIPS32  and 


Opera  Unveils 
Unite  Platform 

-  Opera  Software 


New  Mexsco  Supercomputer 
Expectations  Raise  Doubts 


BENCHMARKS  LAST  WEEK 


If  it  was  just  a 
computer,  we 
wouldn’t  be  any  dif¬ 
ferent  from  any  other 
system  in  the  country 


/  r" 

i 

Attend  the  world’s 
largest  event  for 
storage,  datacenter, 
infrastructure,  and 
business  continuity. 

At  SNW,  you  can  choose  from  over  150  educational 
sessions  and  network  with  peers  from  around  the  globe, 
plus  visit  with  top  solutions  providers  in  the  world's  largest 
Expo  devoted  to  storage  and  related  technologies.  This  is 
your  opportunity  to  quickly  gather  reliable,  firsthand, 
practical  knowledge  you  can  put  to  work  right  away, 

SNW  is  where  you  can  learn,  share  experiences  and  make 
decisions.  Join  your  peers  and  industry  experts  this 
October  in  Phoenix! 


COMPUTERWORLD  SNIa" 

SNW 

October  12-15,  2009 

JW  Marriott  Desert  Ridge,  Phoenix,  Arizona 


www.snwusa.com 


I  NEWS  ANALYSIS 


Iniversity  Picks  3Com 
witches  Over  Ciscos 


Video  is  a  major  driver  of  net¬ 
work  growth  on  the  Quinnip- 
iac  campus.  By  Matt  Hamblen 

UINNIPIAC  Uni-  I  trying  to  block  use  of  You- 
versitv  in  Hamden,  Tube  by  undergraduates," 
Conn.,  is  using  he  said.  “But  following  the 


crosoft  Corp.’s  Office  Com¬ 
munications  Server  and 
wireless  gear  from  Aruba 
Networks  Inc. 

In  the  latest  upgrade,  core 
H3C  S9500  switches  were 
recently  installed  in  several 
school  facilities  and  are  cur¬ 
rently  being  configured.  The 


Cisco  does  have  $30  billion 
in  cash,”  Tarca  added.  “But 
we  stuck  with  our  funda¬ 
mental  principles  of  wanting 
a  good  product  at  the  right 
price  that  is  supportable, 
with  a  team  and  a  company 
to  back  it  up.  Those  require¬ 
ments  were  met  by  3Com.” 

Kelly  said  he  asked  com¬ 
panies  that  were  competing 
for  the  contract  to  offer 
reasons  why  the  university 
shouldn’t  use  3Com,  but  he 
received  few  responses. 

He  also  noted  that  the 
university  installed  3Com’s 


■  NEWS  ANALYSIS 


the  collapse  of  its  government.  It  oc¬ 
curred  to  me  that  the  political  infight¬ 
ing  between  parties  was  not  much  dif¬ 
ferent  —  except  for  the  stakes  —  than 
the  tensions  and  stresses  that  charac¬ 
terize  choices  about  war  and  peace.  I 
decided  to  construct  a  data  set  based 


Mesquita 

His  computer  model  can  predict  the 
outcomes  of  international  conflicts.  He 


on  my  knowledge  of  India’s  political 
parties  and  their  leaders  and  feed  it 
into  the  primitive  model  I  was  work¬ 
ing  on  at  the  time  for  my  war  project. 


explains  how  it  works,  and  the  reaction 
from  the  political  science  community. 
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BRUCE  BUENO  DE  MESQUITA  THE  GRILL  ■ 


To  my  surprise,  the  model's  output  led 
to  a  prediction  entirely  different  from 
my  personal  judgment.  In  any  event, 
my  personal  opinion  turned  out  to 
be  wrong  and  the  model's  prediction 
turned  out  to  be  correct. 

That  led  me  to  build  a  larger  sample 
of  applications  to  see  whether  I  had 
been  lucky  or  whether  I  had  found  a 
model  with  some  predictive  reliability. 
As  it  turned  out,  the  model  got  right 
the  next  17  cases  it  was  applied  to,  and 
at  that  point  I  concluded  that  prob¬ 
ably  there  was  some  genuine  explana¬ 
tory  power  behind  the  model’s  logic. 
Although  prediction' has  never  been 
the  main  activity  in  my  research  and 
teaching  life,  it  has  continued  to  occu¬ 
py  a  niche  in  my  research  and  teaching. 

Your  computer  model  has  been  used  by 
the  Department  of  Defense  to  help  predict 
political  outcomes  across  the  globe.  How 
does  H  work?  The  model  starts  by  as¬ 
suming  that  everyone  cares  about  two 
dimensions  on  any  policy  issue:  getting 
an  outcome  as  close  to  what  they  want 
as  possible,  and  getting  credit  for  be¬ 
ing  essential  in  putting  a  deal  together 
—  or  preventing  a  deal.  The  model 
estimates  the  way  in  which  individual 
decision-makers  trade  off  between 
credit  and  policy  outcomes.  Some  are 
prepared  to  go  down  in  a  blaze  of  glory 
seeking  the  outcome  they  want,  know¬ 
ing  they  will  lose.  Others  have  their 
finger  in  the  wind,  trying  to  figure  out 
what  position  is  likely  to  win  and  then 


strategically,  each  taking  into  account 
the  expected  responses  of  others  and 
recognizing  that  others  are  taking  into 
account  that  their  responses  are  being 
taken  into  account,  etc.  Game  theory 
just  involves  people  who  are  assumed 
to  be  pursuing  their  interests  and  who 
do  what  they  believe  —  perhaps  mistak¬ 
enly  —  will  give  them  the  best  available 
outcome,  given  the  constraints  under 
which  they  must  make  choices.  These 
constraints  can  involve  limitations  to 
their  resources,  their  beliefs  about  the 
intentions  of  others,  and  many  other 
sources  of  uncertainty  and  of  risk. 


cal  leaps  since  you  created  the  model  25 
years  ago.  How  has  your  model  changed? 

Although  the  logic  behind  models  such 
as  mine  could  have  been  developed 


'  Today 

I  there 
is  essen¬ 
tially  no  memory 
constraint  and  no 
processing  con¬ 
straint  for  the  sort 
of  modeling  I  do. 


produce  a  desired  outcome  except  to 
make  the  data  appear  transparently 
wrong  to  anyone  looking  at  the  data. 
For  instance,  we  could  produce  peace 
between  the  Israelis  and  Palestinians 
by  assuming  they  agree  on  everything, 
but  that  would  not  be  taken  seriously. 
Realistic  data  need  to  reflect  the  cur¬ 
rent  status  quo.  Then  how  things 
evolve  is  driven  by  the  model's  logic. 

I  teach  students  how  to  construct 
data  sets,  and  they  always  check,  for 
instance,  that  the  initial  round’s  out¬ 
come  looks  like  the  current  status  quo, 
because  that  is  what  the  data  should 
reflect  if  they  are  realistic. 

A  robot  can  only  do  what  it's  told.  At  any 
point,  do  you  have  to  step  in  and  account 
for  the  fact  that  computers  don't  have 


When  I  report  results,  I  leave  it  to 
experts  to  dig  into  the  interpretive  nu¬ 
ances  of  the  analysis.  I  limit  myself  to 
reporting  only  what  I  can  show  in  the 
model's  output.  Part  of  the  point  behind 
a  model  such  as  this  is  for  users  to  real¬ 
ize  it  is  just  a  model  and  not  a  replica- . 
tion  of  reality  in  all  its  subtlety.  Instead, 
the  model  should  help  push  people  to 
think  about  contingencies  they  had  not 
considered  but  that  emerge  from  the 
modeling  exercise. 

The  question  of  ethics  is  different 
from  stepping  in  and  substituting  per¬ 
sonal  judgments  about  emotions,  feel¬ 
ings,  etc.  I  impose  limits  on  the  things 
I  am  willing  to  examine  with  the  mod- 


divided.  Those  more  oriented  toward 
quantitative  modeling  are  generally 
supportive,  sometimes  enthusiastic 
and  sometimes  well-informed  critics. 
Those  whose  approach  tends  toward 
area  studies  or  historical  case  study 
analysis  tend  to  be  dismissive  of  tech¬ 
nical  approaches  to  studying  politics. 

Your  model  is  based  on  game  theory. 
What  is  this  exactly,  and  how  does  it 
pertain  to  your  model?  Game  theory  is 
a  mathematical  structure  for  examin¬ 
ing  how  people,  for  instance,  interact 


of  players.  Today  there  essentially  is  no 
memory  constraint  and  no  processing 
constraint  for  the  sort  of  modeling  I  do. 

How  do  you  keep  personal  viewpoints 
and  bias  out  of  the  initial  input?  1  cannot 
look  at  a  data  set  and  anticipate  what 
the  outcome  will  be  from  the  model. 
This  is  true  even  with  a  data  set  with 
as  few  as  three  or  four  players.  The 
problems  I  look  at  with  my  model  typi¬ 
cally  involve  many  dozens  of  players, 
sometimes  more  than  200.  There  is 
no  way  to  construct  biased  data  to 


Predicting  the  future  of  international 
conflicts  is  stressful  business.  What  do 
you  enjoy  outside  of  work?  I  don't  find 
doing  forecasts  in  the  least  stressful.  It 
is  a  great  pleasure  to  see  basic  research 
translated  into  a  practical  tool  for  as¬ 
sisting  policymakers.  And  this  is  far 
from  the  main  strand  of  my  research. 
Outside  of  work  I  enjoy  visiting  my 
children  and  grandchildren,  travel, 
playing  squash  and  hiking. 

—  Interview  by  Sara  Forrest, 
a  freelance  photographer  and  writer  in 
New  York  (studio@saraforrestphoto.conO 


|UNE  22.  200*)  COMPUTER  WORLD  17 


COVER  STORY  ■ 


Corporate  IT 
Done 


CIOs  are  turning  to  cheap,  lightweight  Web  2.0 
and  open-source  tools  to  get  the  joo  done  fast.  By  Julia  King 


^  ”  AN  ANTONIO-BASED  CPS  Energy, 

Similarly,  CIO  Jamie  Kutzer  had  considered  buying 

M  ^  the  largest  municipality-owned 

“a  big-name  intranet  package"  from  a  top-tier  software 

fl  '  gas  and  electric  company  in  the 

vendor  as  the  tool  to  drive  online  collaboration  across 

country,  needed  to  get  a  better 

Allied  Building  Products  Corp.’s  200  branches. 

eriD  on  its  budget  and  its  budget- 

“But  it  was  just  too  costly,  too  big  —  and  frankly,  I 

ing  process.  Since  CPS  Energy 

don't  know  if  we  were  ready  for  the  big  leap,  Kutzer 

was  an  enterprise  SAP  user,  more 

says.  “So  we’re  using  smaller,  lighter  and  cheaper  tech¬ 

■  SAP  AG  software  was  the  obvi- 

nologies  from  companies  that  I  had  never  heard  of  but 

V  W  ous  and  lowest-risk  way  for  CIO 

that  my  Web  services  team  knew  about.  They  provide 

Christopher  Barron  to  go. 

a  much,  much  lower  cost  of  entry.” 

Instead,  he  opted  for  software  from  a  far  lesser-known 

As  the  ongoing  recession  continues  to  choke  IT  capi- 

vendor  at  a  far  lower  price  —  about  four  times  less. 

Continued  on  page  22 

LEANER. 
MEANER. 
GREENER, _ 

Tho  inefficiency.  complexity  and  using  eneigy  costs  of  twentieth -centuiy  datacenteis 
simply  can't  support  the  demands  ot  twentyTirst-amtwy  tllpftess.  The  IBM  BladeCenffit 
HS..’:’  w  ith  Intel  Xeon  Processoi  5500  Senes  can  impiovo  the  economics  of  youi 
datacenfei  by  using  up  to  95",-  less  space  and  90",-  less  eneigy  than  competitive  lack 
seiveis  deployed  3  yeais  ago.  all  without  sgculicing  peifoimance!  A  gioenei  wot  Id 
stalls  with  business.  Gieener  business  starts  with  IBM 


SYSTEMS.  SOFTWARE.  SERVICES.  FOR  A  GREENER  WORLD. 

Loam  how  to  impiovo  peiloimance  and  costs  at  ibm  comgteen  bladecenter 
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■  COVER  STORY 


,  A  Call  to  ^ 

Experiment 


MANJIT  SINDH  is 

responsible  for  IT  at 
a  $3  billion  Fortune 
500  company  with  operations  in  70 
countries  on  six  continents.  He's  also 
a  technology  executive  who  believes 
that  experimentation  is  a  good  thing 
-  especially  if  it  saves  money. 

As  CIO  at  Chiquita  Brands  Interna¬ 
tional  Inc..  Singh  was  one  of  the  first 
high-profile  users  of  software-as-a- 
service.  Now  he's  back  at  the  leading 
edge,  deploying  wikis,  expanding 
Chiquita’s  VoIP  usage  and  looking  to 
do  more  with  open-source  software. 

“CIOs  as  a  group  are  very  risk- 
averse.  As  a  result,  we  don't  tend  to 
embrace  the  new  technologies  as 
much  as  we  should."  Singh  says.  “But 


At  Chiquita.  Singh  says,  “we're 
constantly  looking  at  things,  trying  to 
figure  out  if  there  is  a  different  way  to 
achieve  the  same  benefit  or  value." 
For  example,  the  company  relies 
heavily  on  VoIP  throughout  its  remote 
operations  in  Central  America.  Now. 
Singh  says,  Chiquita  is  getting  more 
aggressive  about  deploying  VoIP  in 
other  regions,  notably  Europe.  Chiq¬ 
uita  recently  fully  VoIP-enabled  its 
headquarters  in  Switzerland. 

“For  us,  it  was  a  step  in  a  different 
direction,"  he  says.  “Now  is  the  time 


M  We’re  trying  to  be 
creative  ana  imagina¬ 
tive  without  overstepping 
capital  expense  restrictions. 


imaginative  without  overstepping  capi¬ 
tal  expense  restrictions,”  he  adds.  “The 
way  to  do  that  is  to  bring  in  smaller 


For  example,  Kutzer  says  Allied  re¬ 
cently  bought  a  small  mapping  applica¬ 
tion  from  a  vendor  he  had  never  heard 
of.  “We  didn't  overinvest.  We  spent 
less  than  $1,000  on  something  that  we 
think  is  going  to  add  value  immediate¬ 
ly  in  our  Web  services  environment.” 

Still  other  companies,  like  $6  billion 
GAF  Materials  Corp.  in  Whippany, 
N.J.,  are  tapping  more  deeply  into 
the  Web  2.0  capabilities  of  already- 
installed  software,  such  as  Microsoft's 
SharePoint,  to  leverage  the  collective 
knowledge  of  their  workers. 

“In  my  industry,  it's  unheard  of  to  be 


£  COVER  STORY 


[ii  implement.  mix  and  match.  It 
includes  software  front  no-nami 


says  Vinnie  Mirchandani,  a  former 
Gartner  Inc.  software  analyst  and 
founder  of  Deal  Architect  Inc.,  a  con¬ 
sulting  lirm  that  helps  large  corporate 
enterprises  evaluate  software  and  ne¬ 
gotiate  contracts. 

"If  you  and  I  can  buy  storage  at  10 
cents  a  gigabyte,  why  are  corporations 
paying  [a|  hundred  times  as  much?" 
Mirchandani  wrote  in  a  recent  blog 
post.  "If  at  any  given  time,  millions  of 
consumers  are  talking  to  each  other 
around  the  world  on  Skype  for  free, 
why  are  mobile  companies  charging  you 
exorbitant  roaming  fees?  If  anyone  can 
call  the  Geek  Squad  and  get  a  one-time 
PC  repair  visit,  why  is  your  desktop  out¬ 
sourcer  not  charging  you  on  a  per-usage 
basis,  rather  than  some  monthly  charge? 

“Consumerizat  ion  of  technology 
should  be  a  broad  manifesto  for  change 
in  corporate  IT  and  enterprise  ven¬ 
dors."  Mirchandani  continued.  “Let's 


■Mi 

have 

If  mr  tactical  war 
ir’"  commanders 

■l  ^  who  use  small 
W\  JMH  chat  rooms  on 
the  battlefield, 
■  and  we’re 
leveraging  wikis  to  enable 
us  to  more  quickly  develop 
shared  intelligence  on  a  par¬ 
ticular  situation  or  event. 

DAVE  MIHELCIC.  CTO.DISA 

In  comparison,  “with  software  from 
smaller  vendors,  it  can  take  20%  to 
40%  less  time  to  implement,  and  if  it 
works,  it  could  save  you  between  three 

The  catch,  of  course,  is  that  if 
doesn't  always  work.  But  even  failing 
seems  to  be  cheaper  than  going  with 
the  big  guys. 

For  example.  CPS  Energy  bought  a 
S250.000  business  process  modeling 
application  that  Barron  says  would 
have  cost  about  S3  million  had  he  pur¬ 
chased  a  similar  system  from  SAP  or 


_  A  Call  to 

Experiment 
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(responsible  for  IT  at 
a  S3  billion  Fortune 
500  company  with  operations  in  70 
countries  on  six  continents.  He's  also 
a  technology  executive  who  believes 
that  experimentation  is  a  good  thing 
-  especially  if  it  saves  money. 

As  CIO  at  Chiquita  Brands  Interna¬ 
tional  Inc..  Singh  was  one  of  the  first 
high-profile  users  of  software-as-a- 
service.  Now  he's  back  at  the  leading 
edge,  deploying  wikis,  expanding 
Chiquita's  VoIP  usage  and  looking  to 
do  more  with  open-source  software. 

“CIOs  as  a  group  are  very  risk- 
averse.  As  a  result,  we  don't  tend  to 
embrace  the  new  technologies  as 
much  as  we  should."  Singh  says.  “But 
the  economy  has  forced  people  to  take 


a  more  serious  look  at  this.  I 
think  it's  good.  This  is  a  para¬ 
digm  shift  that  will  be  around 
long  after  the  economy  recovers." 
At  Chiquita.  Singh  says,  “we're 
constantly  looking  at  things,  trying  to 
figure  out  if  there  is  a  different  way  to 


For  example,  the  company  relies 
heavily  on  VoIP  throughout  its  remote 
operations  in  Central  America.  Now, 
Singh  says.  Chiquita  is  getting  more 
aggressive  about  deploying  VoIP  in 
other  regions,  notably  Europe.  Chiq¬ 
uita  recently  fully  VoIP-enabled  its 
headquarters  in  Switzerland. 

“For  us,  it  was  a  step  in  a  different 
direction,”  he  says.  “Now  is  the  time 
for  experimentation." 

-JULIA  KING 


We’re  trying  to  be 
creative  and  imagina¬ 
tive  without  overstepping 
capital  expense  restrictions. 

JAMIE  KUTZER.  CIO. 

ALLIED  BUILDING  PRODUCTS  CORP 

is  hunkered  down  over  their  balance 

"We're  trying  to  be  creative  and 
imaginative  without  overstepping  capi¬ 
tal  expense  restrictions."  he  adds.  "The 

solutions  to  meet  acute  needs.  In  the 
past,  we  may  have  tried  to  kill  10  birds 
with  one  stone." 

For  example,  Kutzer  says  Allied  re¬ 
cently  bought  a  small  mapping  applica¬ 
tion  from  a  vendor  he  had  never  heard 
of.  "We  didn't  overinvest.  We  spent 
less  than  S1.000  on  something  that  we 
think  is  going  to  add  value  immediate- 

Still  other  companies,  like  S6  billion 
GAF  Materials  Corp.  in  Whippanv. 
N.J.,  arc  tapping  more  deeply  into 
the  Web  2.0  capabilities  of  already- 
installed  software,  such  as  Microsoft's 
SharePoint.  to  leverage  the  collective 
knowledge  of  their  workers. 

"In  my  industry,  it's  unheard  of  to  be 
thinking  this  way."  says  Adam  Noble. 
GAPs  CIO.  “Historically,  it  has  all  been 
one-way  communication.  But  now. 
engineering  and  product  development 
groups  are  using  blogs  to  share  ideas, 
and  what  it's  doing  is  driving  product 


a  Web  2.0  strategy  is  an  absolute  must 
regardless  of  budgetary  constraints 
and/or  old-school  processes.  “If  you 
take  the  position  that  'we  don't  do 
social  networking.'  your  resources 


CAREERS 


suddenly  dropping  from  an  annual  sal¬ 
ary  of  $80,000  to  a  small  retirement 
check  —  Adams  was  grappling  with 
how  to  transition  into  a  civilian  career. 

“I  had  to  start  all  over  again,”  he  says. 
With  a  young  son  (and  now  a  second 
child)  and  a  wife  who  works  as  a  school¬ 
teacher,  “retirement  was  not  high  on  my 
list  of  things  to  do,”  he  explains. 

Through  a  friend,  he  obtained  a  part- 
time  position  at  Granby  High  School 
in  Norfolk,  Va.,  as  a  network  engineer, 
since  he  had  some  basic  knowledge  of 
computers.  But  as  a  machinist’s  mate 
in  the  Navy,  Adams  knew  more  about 
hydraulics  than  hard  drives,  so  he 
began  researching  formal  education 
opportunities  to  increase  his  standing 
Continued  on  page  26 


FREE  CERTIFICATIONS 

THROUGH  THE  COMPTIA  EDUCATIONAL  FOUNDATION.  BY  MARY  BRANDEL 


C0MPUTERW0RLD 


CALL 

FOR 

ENTRIES 


i  mui 

Ones 

to  Watch 


AWARDS  2010 


We’re  looking  for  the  next  generation  of  standout  IT  leaders.  The 
CIO  Ones  to  Watch  Award  honors  the  rising  stars  in  IT— the  senior  staff 
destined  to  become  the  CIOs  of  the  future— as  identified  and  sponsored 
by  the  CIOs  of  today’s  leading  organizations. 


Apply 


Candidates  may  be  nominated  by  their  CIO  based  upon  several 
characteristics  including  the  proven  ability  to  lead  teams  and  change, 
drive  innovation  and  deliver  value  to  the  business.  Candidates  may 
also  nominate  themselves  or  be  nominated  by  a  colleague  -  all 
nominations  must  be  endorsed  by  a  CIO.  The  awards  are  judged  by 
a  panel  of  veteran  CIOs  experienced  in  leadership  development  and 
understand  the  characteristics  that  prepare  today's  IT  managers  to 
be  tomorrow's  successful  CIOs. 

Apply  today  at:  cio.com/otw 


00  Seen  Winners  will  be  honored  during 
the  sixth  alhnual  CIO  Leadership 
Event  May  2-4,  2010,  at  the 
Broadmoor  in  Colorado  Springs, 
featured  in  the  May  issue  of  CIO 
magazine  and  online  at  cio.com 


Produced  by 


Don't  RP  I  atP  Nominations  accepted  through 
L^UI  L  DC  l_a  October  15.  For  more  information 
about  this  prestigious  program 
visit:  cio.com/cio-awards 


SOD  CIO  Executive  Council 

Leaders  Shaping  the  Future  of  Busine 
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V. 

CERTIFICATIONS:  A*  and  Network*:  working 
on  Server*:  plans  to  get  Security*. 

that  1  have  certifications,  but  they're  looking  for 
someone  with  a  degree." 

WHY  CREATING  FUTURES?  In  2004, 1  tried 
to  get  my  degree  in  electrical  engineering  but  was 
unable  to  complete  it.  I'm  now  working  toward 
an  associates  degree  in  IT  through  Kaplan  Uni¬ 
versity's  online  program.  When  1  heard  about  the 
Creating  Futures  program.  1  decided  to  back  up 
my  degree  with  these  certifications,  figuring  both 
will  look  good  on  my  rbsumb." 

OUTLOOK:  "I'm  not  discouraged.  Once  I've  go 
everything  in  order.  1  plan  to  move  out  of  state. 
One  of  the  main  reasons  1  chose  this  career  he 
is  that  technology  will  always  be  here." 

HEDRICK 

-  mm 

WHAT  HE  LIKES  ABOUT  THE  PROORAM: 

"Mentoring  is  built  into  the  training.  For  instance, 
when  you  complete  a  section,  you  e-mail  your  an-  . 

swers  to  a  mentor,  and  he'll  say  whether  you  were  J 

Lansdale. 

SERVICE:  14  years  in  the 
U.S.  Navy.  Left  with  a 
physical  disability. 

DAVID  GOMEZ 

Miami 

SERVICE:  Joined  the  U.S.  Army  in  August  2003. 
Ended  active  duty  as  a  supply  specialist  in  April 
2008.  Currently  intheArmyReserve. 

right  or  wrong  and  what  you  should  do  differently."  j 
CURRENT  EMPLOYMENT:  "Mostly  freelance, 
driving  from  site  to  site  to  do  computer  repairs. 

I'm  also  working  as  a  security  guard.” 

WHAT  HE'S  FINDING  IN  THE  JOB  MARKET: 

"They're  looking  for  people  with  managerial  ex¬ 
perience.  not  entry-level.  Employers  say  it's  great  ' 

Wfa  JK  CERTIFICATIONS: 

A*  and  Network*. 

WHY  CREATING  FUTURES?  "In  the  Navy.  1 
got  interested  in  computers,  and  I'd  owned  one 
since  1989.  So  when  1  left.  1  got  my  associate's 
degree  in  networking  through  a  [Veterans  Affai 
vocational  retraining  program.  1  worked  a  lot  of 

■  CAREERS 


DAVID  GOMEZ 

SERVICE:  Joined  the  U.S.  Army  In  August  2003. 
Ended  active  duty  as  a  supply  specialist  in  April 
2008.  Currently  in  the  Army  Reserve. 


on  Server*:  plans  to  get  Security*. 


WHY  CREATtNO  FUTURES?  “In  2004. 1  tried 
to  get  my  degree  in  electrical  engineering  but  was 
unable  to  complete  it  I’m  now  working  toward 
an  associate  s  degree  in  IT  through  Kaplan  Uni¬ 
versity's  online  program.  When  I  heard  about  the 
Creating  Futures  program.  I  decided  to  back  up 
my  degree  with  these  certifications,  figuring  both 
will  look  good  on  my  resume." 


‘Mentoring  Is  butt  into  the  training.  For  instance. 


CURREKT  EMPLOYMENT:  "Mostly  freelance, 
driving  from  site  to  site  to  do  computer  repairs. 
I'm  also  working  as  a  security  guard.' 


WHAT  HE'S  FINDINO  IN  THE  JOB  MARKET: 

■They're  looking  for  people  with  managerial  ex¬ 
perience.  not  entry-level.  Employers  say  it's  great 


OUTLOOK:  "I'm  not  discouraged.  Once  I've  got 
everything  in  order.  I  plan  to  move  out  of  state. 
One  of  the  main  reasons  I  chose  this  career  held 
is  that  technology  will  always  be  here.’ 


TROY  HEDRICK 


SERVICE:  14  years  in  the 
U.S.  Navy.  Left  with  a 
physical  disability. 


_  "In  the  Navy.  I 

got  interested  in  computers,  and  I'd  owned  one 
since  1989.  So  when  I  left.  I  got  my  associate's 
degree  in  networking  through  a  [Veterans  Affairs] 
vocational  retraining  program.  I  worked  a  lot  of 


people  traditionally  underrepresented  for  this  article,  all  have  found  some  IT- 

in  IT.  Of  all  the  people  who  enroll  in  related  work  (see  profiles  below), 

the  program,  about  40%  go  on  to  earn  a  To  help  Creating  Futures  partici- 

certification,  and  Venator  is  working  to  pants  find  jobs,  the  foundation  works 
raise  that  number.  One  way  is  through  with  placement  firms  such  as  Robert 

a  newly  added  prescreening  step  in  Half  Technology  and  Bender  Consult- 

which  CompTIA  attempts  to  determine  ing  Services  Inc.  The  foundation  inter- 
whether  an  individual  has  the  right  views  South  Carolina  veterans  through 

background,  motivation  and  computer  Fast  Forward,  a  Columbia,  S.C.-based 
skills  to  obtain  a  certification.  The  organization  that  provides  technol- 

is  huge,"  Willmer  says.  At  the  same  time, 
“we  don’t  want  to  sugarcoat  it;  it’s  tough 
times  out  there,"  he  says.  “It’s  highly 
competitive,  and  while  certifications 
don’t  take  the  place  of  on-the-job  experi¬ 
ence,  if  you  have  certification  in  an  area 
of  demand,  it’s  definitely  a  leg  up.” 

Although  Adams  got  his  start  in  com¬ 
puting  before  obtaining  certification, 
he  credits  the  CompTIA  program  with 

foundation  also  provides  free  computer  ogy  education  and  access  to  people 
literacy  courses  for  veterans  who  don’t  who  have  been  underserved  through 
have  a  computer  background.  traditional  programs.  It  also  works 

Venator  says  Creating  Futures  is  dif-  to  match  participants  with  openings 
ferent  from  other  training  programs  in  for  internships  and  entry-level  jobs  at 
that  it  offers  a  complete  package  of  ser-  CompTIA  member  companies  such  as 

contract  jobs,  but  1  never  quite  got  a  full-time  iob 

because  1  wasn't  certified.  Mound  out  about  the  PDA  UN  nAUAMII 

Creating  Futures  program  on  CompTIA’s  Web  site  hnilnJU  llll|lUVnll 
and  saw  1  was  qualified  because  1  left  the  Navy  VI 1T1I  Bill  UVIIVinil 

solidifying  his  career.  Without  that  op¬ 
portunity,  he  says,  “I  most  likely  would 
have  been  working  at  Wal-Mart"  ■ 
Brandel  is  a  Computerworld 
contributing  writer.  Contact  her 
at  marybrandel@verizon.net. 

CURRENT  EMPLOYMENT: ‘Igotajobasa 
project  analyst  in  November  2008  at  TEKsys- 
tems  in  Cincinnati.  I'm  managing  projects  related 
to  6PS  systems  and  RFID  tags.  After  1  got  my 

with  a  disability.'  Lebanon,  Ohio 

SERVICE:  Joined  the  Army 

CURRENT  EMPLOYMENT:  "I’m  working  down  Ht, after  high  school  and  served 
in  Philadelphia  doing  a  short-term  project  for  a  from  1989  to  1993. 

Network*  certification,  1  had  mote  confidence  to 
go  out  and  get  a  job  related  to  IT.  The  certifica¬ 
tions  don't  apply  specifically  to  the  job,  but  know¬ 
ing  1  had  a  good  understanding  of  the  technology 

company,  cleaning  out  their  network  dose!  dia-  - 

gramming  the  network,  doing  some  documents-  V^B^B  WHY  CREATING  FUTURES? 
lion.  It  pays  the  bills.'  *Whenl  came  out  of  the  Army. 

was  a  leg  up  * 

WHAT  HE  LIKES  ABOUT  THE  PROGRAM: 

“The  online  training  walks  you  through  the  steps. 

WHAT  HFS  FINDING  IN  THE  JOB  MARKET:  |0t  of  customer  service  jobs,  including  at  a  hotel. 
'The  certification  has  actually  opened  doors.  a  video  store  and  an  insurance  agency.  1  was 

I've  been  able  to  gel  job  Interviews  that  1  wouldn't  always  interested  in  computers  but  didn't  know 
have  been  qualified  (or  without  A*,  even  though  how  to  get  into  it.  including  how  to  get  certified. 

and  you  can  go  back  and  forth  as  you  need  to. 

The  drawback  is  for  people  who  arenl  seH- 
motivated.  because  you  definitely  have  to  do  all 

1  have  six  years  of  experience  doing  IT  work.  The  |n  2007. 1  was  doing  some  administrative  temp 

more  people  you  can  interview  with,  the  better  work,  and  1  subscribed  to  an  e  mall  newsletter 

the  chances  you  have  of  getting  a  job.'  that  CompTIA  ottered,  and  1  sawthey  ottered  free 

WH»T  Hf  1  ufee  inmiT  thf  pofinBiu  training  for  vets.  1  applied  that  same  day.  It  was 

the  training  on  your  own.  There's  an  online  mentor 

peoplearenotcompletelydedicatedtodoingit. 
it’s  easy  to  not  do  it.' 

WHAT  HE  LIKES  ABOUT  THE  PROGRAM.  u.  * 

'The  tests  alone  are  $300.  so  to  be  able  to  take  *****  opportunity  for  me. 

them  free  of  charge  is  awesome.  They  even  give  CERTIFICATIONS:  A*  and  Network*: 

practice  tests  (or  Iree,  which  aren't  cheap  to  buy.'  studying  lor  Security*. 

OUTLOOK:  'You  always  have  to  keep  an  eye  on 
the  future.  I'm  looking  to  take  some  of  the  other 
certifications  and  see  where  that  takes  me.' 

HARDWARE 


{  } 


Inc.  in  Columbus,  Ohio. 

Cox  is  rolling  out  the  laptops  in  the 
early  stage  of  what’s  planned  to  be  a 
yearlong  implementation.  The  Dell 


8  T  H  ANNUAL 

DIGITALIDWORLD 


“ Driving  Innovation  with  Identity” 

September  14-16,  2009 
Rio  Hotel  and  Casino 
Las  Vegas,  Nevada 
www.digitalidworld.com 


Digital  ID  World  is  the  premier  event  for  the 
identity  and  access  management  industry.  This 
is  the  one  place  where  you  will  find  focused 
content,  focused  solutions  and  focused  net¬ 
working  opportunities  to  support  your  IDM 
initiatives.  You’ll  hear  from  industry  experts 
and  your  peers  on  the  latest  tools,  technolo¬ 
gies  and  tactics.  Top-notch  keynote  addresses 
from  leading  identity  management  and  privacy 


experts  like  Jeff  Jonas  and  Dr.  Larry  Ponemon 
set  the  stage  for  three  days  of  Summit  work¬ 
shop  sessions,  hands-on  labs  and  focused 
breakout  sessions  on  burning  technological  and 
business  issues.  You'll  learn  what  has  worked 
well,  what  to  avoid  and  how  to  prioritize  your 
identity  management  projects  within  the  scope 
of  your  company's  goals.  If  it's  about  identity, 
you'll  hear  about  it  at  Digital  ID  World. 


■  HARDWARE 


MOur  best  advice, 
is  to  treat  used  or 
refurbished  IT  equipment 
like  a  used-car  purchase 
-  kick  the  tires  and  get  the 
dealer  to  pony  up  for  an 
extended  warranty. 

STEVE  BRASEN,  ANALYST. 

ENTERPRISE  MANAGEMENT  ASSOCIATES  INC. 


.  Continued  from  page  28 

“One  of  the  benefits  Redemtech 
offers  is  the  diagnostic  and  grading 
process  that  they  put  their  equipment 
through."  Bates  says.  “We  knew  we 
were  getting  grade-A  machines,  which 
means  that  there  are  no  hardware  de¬ 
fects  or  cosmetic  issues  with  the  equip- 


visual  and  technical  refurbishment 
process,”  he  says.  In  contrast,  a  ma¬ 
chine  that’s  just  described  as  “used” 
isn't  guaranteed  to  have  gone  through 
that  process. 

Washburn  explains  that  in  this 
economy,  when  capital  expenditure 
dollars  are  hard  to  come  by,  organiza¬ 
tions  are  looking  to  preserve  funds 
wherever  they  can.  Plus,  the  reuse 
option  does  double-duty  by  fulfilling 
“green  IT”  goals,  which  are  increas¬ 
ingly  part  of  the  agendas  at  many  com¬ 
panies,  he  says. 

Washburn  doesn't  have  hard  data 
about  the  number  of  customers  buy¬ 
ing  used  vs.  new,  but  he  says  demand 
for  refabbed  gear  is  high  enough  that 
supply  is  starting  to  become  an  issue. 


used  DEC  AlphaServer  ES45s  to  up¬ 
grade  and  to  continue  supporting  the 
lab’s  existing  DEC  servers. 

If  the  used  equipment  weren’t  avail¬ 
able,  his  group  would  have  to  spend 
time  and  money  developing  a  new 
system,  Tran  says,  noting  that  such  an 
endeavor  “would  be  fairly  Apensive.” 

The  IT  department  at  Georgia 
Southern  University  purchased  x86 
and  Unix  servers;  Net  App  Fibre  Chan¬ 
nel  storage  gear;  Cisco  switches,  rout¬ 
ers  and  hubs;  and  other  networking 
equipment  —  all  from  Canvas  Systems, 
a  supplier  of  used  IT  equipment  in 
Norcross,  Ga. 

Timur  Mirzoev,  assistant  professor 
of  IT  at  Georgia  Southern,  says  the 
school  hasn’t  had  any  problems  with 
the  used  equipment.  Moreover,  it  has 
proved  to  be  a  great  teaching  aide,  be¬ 
cause  students  have  handled  the  instal- 


if  we  had  purchased  it  new.” 

The  laptops  included  a  90-day  war¬ 
ranty,  she  says.  This  is  on  par  with 
what  some  new  laptops  come  with, 
though  there  are  exceptions.  New 
Dell  Vostro  laptops,  for  instance.  hav< 


QUICK 


lation,  configuration  and  management 
of  the  used  gear. 

“I  think  this  is  the  only  way  we 
could  afford  to  teach  advanced  tech¬ 
nology  with  real,  hands-on  experi¬ 
ence,”  says  Mirzoev.  “In  addition  to  re¬ 
equipment,  we  are  also 
greener  global  environ- 


■  HARDWARE 


MOur  best  advice, 
is  to  treat  used  or 
refurbished  IT  equipment 
like  a  used-car  purchase 
-  kick  the  tires  and  get  the 
dealer  to  pony  up  for  an 
extended  warranty. 
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means  that  there  are  no  hardware  de¬ 
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that  process. 

Washburn  explains  that  in  this 
economy,  when  capital  expenditure 
dollars  are  hard  to  come  by,  organiza¬ 
tions  are  looking  to  preserve  funds 
wherever  they  can.  Plus,  the  reuse 
option  does  double-dilty  by  fulfilling 
"green  IT”  goals,  which  are  increas¬ 
ingly  part  of  the  agendas  at  many  com¬ 
panies,  he  says. 

Washburn  doesn't  have  hard  data 
about  the  number  of  customers  buy¬ 
ing  used  vs.  new,  but  he  says  demand 
for  refabbed  gear  is  high  enough  that 
supply  is  starting  to  become  an  issue. 


used  DEC  AlphaServer  ES45s  to  up¬ 
grade  and  to  continue  supporting  the 
lab's  existing  DEC  servers. 

If  the  used  equipment  weren’t  avail¬ 
able,  his  group  would  have  to  spend 
time  and  money  developing  a  new 
system.  Tran  says,  noting  that  such  an 
endeavor  "would  be  fairly-expensive.” 

The  IT  department  at  Georgia 
Southern  University  purchased  x86 
and  Unix  servers;  NetApp  Fibre  Chan¬ 
nel  storage  gear;  Cisco  switches,  rout¬ 
ers  and  hubs:  and  other  networking 
equipment  —  all  from  Canvas  Systems, 
a  supplier  of  used  IT  equipment  in 
Norcross,  Ga. 

Timur  Mirzoev,  assistant  professor 
of  IT  at  Georgia  Southern,  says  the 
school  hasn't  had  any  problems  with 
the  used  equipment.  Moreover,  it  has 
proved  to  be  a  great  teaching  aide,  be- 


for  a  trip  across  Africa’s  Namib  Desert. 


quipped  scientists  with  solar-powered  notebooks 


Nonprofits  Share 
Teen  Expertise 


Cutting-edge  IT  applications 
include  a  solar-powered 
MacBook  for  a  trek  across 
the  desert.  By  Nancy  Gohring 


that  get  together  twice  yearly 
to  share  tips  on  how  they're 
using  technology.  Last  month, 
they  met  at  Microsoft  Corp.'s 
campus  in  Redmond,  Wash. 

The  way  NGOs  like  The 
Nature  Conservancy  use 
technology  is  a  bit  like  the 
off-label  use  of  medicine, 
when  doctors  prescribe 


doesn  t  always  ht  tne  special 
needs  of  nonprofits  though, 
and  it  can  be  too  expensive. 
So  some  NGOs  are  devel¬ 
oping  their  own  systems, 
often  based  on  open-source 
software,  that  are  more  af¬ 
fordable. 

For  instance,  Peter  Bla- 
din,  founding  director  of 
the  Grameen  Foundation’s 
technology  center  in  Seattle, 
is  working  to  develop  open- 
source  software  called  Mi- 
fos,  which  is  specifically  de¬ 
signed  for  the  operations  of 
microfinance  organizations. 
“The  beauty  is  anybody  with 
technical  skills  can  have  ac¬ 
cess  to  the  source  code  and 


Emulation  or 
Virtualization? 

Don’t  be  confused!  Virtual¬ 
ization  and  emulation  aren’t 
the  same.  Here’s  how  they 
differ.  By  Russell  Kay 


Emulation  is  important  in 
fighting  obsolescence  and 
keeping  data  available.  Emu- 


called  an  emulator,  whereas 
we'd  use  the  word  simulator 
to  describe  a  PC  program  that 
lets  us  run  an  older  program 
(designed  for  a  different  plat¬ 
form)  on  a  modem  machine. 
Today  emulation  refers  to 
both  hardware  and  software. 


completely  functional  man¬ 
ner  regardless  of  their  physi¬ 
cal  layout  or  location.  This 
includes  splitting  a  single 
physical  computer  into  mul- 


Definition 


An  older,  seemingly  re¬ 
lated  term  is  emulation, 
taut  it's  not  the  same 
thing.  Here,  well  sort 


or  other  computers  on  the 
same  network  —  can’t  tell 
the  difference  between  a 
virtual  machine  and  a  physi¬ 
cal  machine. 

Virtual  machines  offer  the 
following  advantages: 

■  They're  compatible  with 
all  Intel  x86  computers. 

■  They’re  isolated  from 
one  another,  just  as  if  they 
were  physically  separate. 

■  Each  is  a  complete,  en- 


I  SECURITY  MANAGER’S  JOURNAL  J.F.  RICE 


We’ve  Been  Blind  to 
Attacks  on  Our  Sites 


A  newly  installed  firewall  uncovers 
site  scraping  by  competitors.  And  who 
knows  how  long  this  has  been  going  on? 


UR  web  sites  IDS  allow  us  to  see  some 
are  under  at-  of  what’s  going  on,  but  can 

tack!  And  my  they  really  detect  active 


le  for  the  Web 
I  crawlers  that  our  com¬ 
petitors  are  using,  because 


Trouble 


Ticket 


AT  ISSUE:  Web  scraping 


ACTION  PLAN:  Better 
security  measures  are 
needed.  And  certainly  it 
pays  to  be  informed. 


I’m  amazed  at  the  sheer 
volume.  I  can't  imagine 
anyone  having  the  time 
to  sit  around  trying  SQL 
injection  attacks  against 
random  Web  servers,  so  I 
have  to  assume  thSt  these 
attacks  are  coming  from 
automated  scripts.  In  any 
case,  they  are  textbook 
examples  of  SQL  injection, 
each  one  walking  through 
various  combinations  of 
SQL  code  embedded  in 


but  we  can't  always  know 
how  accurate  those  guesses 
are  and  what  we  might  be 
overlooking. 

My  company’s  front- 
end  Web  servers,  which 
directly  receive  connec¬ 
tions  from  the  Internet 
through  our  firewalls,  are 
definitely  a  hot  spot  in  our 
network.  The  firewalls  and 


words  and  such),  to  our 
customers.  Such  restric¬ 
tions  aren't  very  difficult 


■  It  isn’t  always 
easy  to  know 
just  how  effective 
our  security 
measures  are. 


better.  Everyone  is  pulling 
together  to  help  fix  the  is¬ 
sue,  and  that  gives  me  a  real 
sense  of  satisfaction. 

Our  Web  application 
firewall  found  some  other 
problems  as  well.  We  ex¬ 
perience  hundreds  of  SQL 
injection  attack  attempts 
every  day.  So  far,  none 
has  been  successful,  but 


As  my  recent  exercise  has 
shown,  it's  hard  to  defend 
against  problems  you  don't 
know  about.  ■ 

This  week’s  journal  is 
written  by  a  real  security 
manager,  “J.F.  Rice,"  whose 
name  and  employer  have 
been  disguised  for  obvious 
reasons.  Contact  him  at 
jf.rice@engineer.com. 
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Bart  Perkins 

The  Benefits  of 
Working  Together 


N  DIFFICULT  ECONOMIC  TIMES,  every  company 
seeks  cost  reductions  and  process  improvements.  But 
now  an  entire  industry  has  banded  together  to  help  its 
constituents  maximize  their  IT-based  assets.  By  develop¬ 
ing  an  industry  architecture  (IA),  the  hotel  industry  hopes  to 
provide  the  entire  sector  with  the  same  types  of  advantages  an 
enterprise  architecture  offers  a  corporation. 

An  IA  seeks  to  remove  i  them  identify  gaps  in  their  Improve  agility.  An  IA 


Wide  Web  Consortium, 
The  Open  Group  and  the 
PCI  Security  Standards 
Council.  Hotels  complying 
with  these  standards  are 
much  more  secure  than 
those  using  homegrown 


standardized  interface 
centralized  software  r 
agement,  and  version  i 


■  An  entire 
industry  has 
bandea  together 
to  maximize  IT- 
based  assets. 


c.,  which  helps  organiza- 
ms  invest  well  in  IT.  Cou¬ 
rt  him  at  BartPerkins@ 


Improve  security.  Secu-  I  LeveragePartners 


ATTENTION.. 

Law  Firms 
IT  Consultants 
Staffing  Agencies 


Are  you  frequently 
placing  legal  or 
immigration  advertisements? 

Let  us  help  you  put 
together  a  cost-effective 
program  that  will  make  this 
time-consuming  task  a 
little  easier! 


Place  your 

Labor  Certification  Ads  here! 


LOOKING  FOR  SOMETHING  NEW? 


Find  your  ideal  IT  job  through  IT  Careers! 


For  additional  IT  positions,  search  w 


sr  20,000  jobs  each  month! 


iS  illflll  illafllilllli  llllllilll 


SharHank 

TRUE  TALES  OF  IT  LIFE  AS  TOLD  TO  SHARKY 


IT  the  Hard  Way 

A  server  has  gotten  flaky,  and 
it's  still  under  a  support  con¬ 
tract  so  this  pilot  fish  calls  the 
vendor.  "Please,  tell  me  the 
express  support  code  on  the 
front,”  says  vendor  tech.  Fish 
reads  off  the  number.  "That 
server  is  in  our  warehouse," 
tech  says.  No,  says  fish,  I 
can  assure  you  that  it's  in  my 
rack.  Let's  check  again.  Tech 
double-checks.  “Our  records 
show  a  refund  was  issued  for 
that  server  15  months  ago."  he 
says.  "You  used  that  refund  to 
purchase  a  more  powerful 
server  and  were  supposed 
to  ship  that  one  back."  Fish 
does  a  little  quick  math: 

That's  about  when  the  then- 
sysadmin  left  the  company. 
Sighs  fish,  “He  never  bothered 


to  process  the  return  of  the 
server.  When  I  arrived  seven 
months  ago.  it  was  racked  and 
ready  to  go.  Tech  support  said 
they  can't  help  without  a  con¬ 
tract,  and  I  had  a  dead  server 
and  people  above  me  with  lots 
of  questions.  We  got  a  new 
server  ordered  right  away  - 
and  this  time  we  are  going  to 


The  Easy  Way 

Remote  users  are  griping  that 
one  of  this  company's  applica¬ 
tions  runs  very  slowly  on  the 
wide-area  network,  so  a  tech 
is  dispatched  to  check  out  the 
problem.  “He  reported  back 
that  the  slowness  was  due  to 
conditional  drop-down  menus 
-  what  you  choose  on  a 
particular  drop-down  will  de¬ 


termine  what  you  get  to  pick 
from  on  the  next  drop-down 
menu."  says  a  pilot  fish  there. 
“These  conditional  menus 
went  four  or  five  layers  deep, 
and  every  time  you  selected 
an  item  from  one  menu,  a 
pop-up  notifier  stating  'Please 
waif  would  show  up."  Fish  re¬ 
ports  the  problem  to  the  app's 
developers  -  who  remove  the 
'Please  wait'  notice.  Result: 
“The  menu  system  was  still 
the  same,"  fish  says.  "Just 
removing  the  notice  that  some 
processing  was  happening 
in  the  background  eliminated 
the  complaints!” 

The  Obvious  Way 

This  pilot  fish  runs  the  IT  de¬ 
partment  at  a  relatively  small 
professional  firm.  Transla¬ 
tion:  Fish  is  responsible  for 
anything  with  wires,  including 
computers,  servers,  the  Inter¬ 
net,  switches,  phones  and  the 
public-address  system.  “One 
afternoon,  I  received  a  phone 
call  from  the  head  of  our  of¬ 
fice,  who  is  a  partner  in  the 


company."  fish  says.  “One  of 
the  other  partners  has  com¬ 
plained  that  a  client  told  him 
that  our  BOO  phone  number 
isn't  working.  I  told  him,  TTI 
call  you  right  back.’  I  hung  up 
the  phone,  picked  up  my  cell 
phone,  called  our  800  num¬ 
ber  and  got  our  receptionist. 
Receptionist  put  me  through 
to  the  head  of  our  office.  1 
just  checked.'  I  said.  ‘Our 
800  number  is  working.’  I'm 
always  happy  when  I  can  put 
all  my  education,  training  and 
technical  experience  to  work 
on  a  difficult  problem." 


'vniason 


Dazzle  Your  CEO 
With  Hard  Facts 


HEN  THE  CEO  asks  the  CIO,  “What  is  the 
value  of  IT?”  the  answer  is  usually  something 
like,  “We  keep  the  company  running,”  “We 
automate  most  of  the  functions  of  the  compa¬ 
ny,”  “We  contribute  to  the  company’s  efficiency,”  or  “We  im¬ 
prove  sales.”  Then  the  CIO  comments  about  the  various  sys¬ 
tems  that  do  all  of  those  things. 

Wouldn’t  it  be  great  if  i  down  in  order  to  put  them  |  ect,  an  ROI  study  could 
the  CIO  could  answer  that  to  work  on  that  task.  They  cause  embarrassment  or, 


It  would  verify  the  ac¬ 
tual  ROI  of  the  project  and 
compare  it  to  the  pre- 


ire  sometimes  used  to  gain 
iroject  approval  The  study 
vould  also  compare  the  de- 


of  numbers  showing  the 
true  value  of  the  measured 
projects.  That  would  make 
it  easier  for  IT  and  the  user 
departments  to  quantify 
the  benefits  of  projects  and 
thereby  show  the  value  of 
IT  to  the  corporation. 


■  Your  CEO  wants 
to  hear  real  ROI 
numbers,  not  some 
self-aggrandizing 
spin  that  can’t  be 
quantified. 


of  that  study  would  be  a  value  of  IT?”  ■ 

computation  of  the  actual  Haul  M.  Ingevaldson  retire 
ROI  achieved  by  each  proj-  as  CIO  of  Ace  Hardware 
ect  and  a  determination  of  in  2004  after  40  years  in 
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